In the Linux kernel, the following vulnerability has been resolved:
usb: cdnsp: Fix a NULL pointer dereference in cdnsp_endpoint_init()
In cdnsp_endpoint_init(), cdnsp_ring_alloc() is assigned to pep->ring and there is a dereference of it in cdnsp_endpoint_init(), which could lead to a NULL pointer dereference on failure of cdnsp_ring_alloc().
Fix this bug by adding a check of pep->ring.
This bug was found by a static analyzer. The analysis employs differential checking to identify inconsistent security operations (e.g., checks or kfrees) between two code paths and confirms that the inconsistent operations are not recovered in the current function or the callers, so they constitute bugs.
Note that, as a bug found by static analysis, it can be a false positive or hard to trigger. Multiple researchers have cross-reviewed the bug.
Builds with CONFIG_USB_CDNSP_GADGET=y show no new warnings, and our static analyzer no longer warns about this code.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 24, 2024 |
| Suse | — | Upgrade dtb-marvellUpgrade kernel-azure-develUpgrade kernel-default-livepatchUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade dtb-broadcomUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-renesasUpgrade gfs2-kmp-defaultUpgrade dtb-alteraUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-baseUpgrade kernel-azureUpgrade dtb-allwinnerUpgrade dtb-qcomUpgrade kernel-64kb-extraUpgrade kernel-default-base-rebuildUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-optionalUpgrade reiserfs-kmp-rtUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-rtUpgrade kernel-source-rtUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-default-livepatch-develUpgrade dtb-sprdUpgrade dtb-caviumUpgrade kernel-rt-vdsoUpgrade kernel-rtUpgrade dlm-kmp-64kbUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-default-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debugUpgrade dtb-rockchipUpgrade kernel-rt-extraUpgrade cluster-md-kmp-rtUpgrade kernel-obs-qaUpgrade dtb-exynosUpgrade kernel-syms-rtUpgrade kernel-default-optionalUpgrade dtb-apmUpgrade kernel-debug-livepatch-develUpgrade dtb-freescaleUpgrade kernel-default-extraUpgrade kernel-rt-develUpgrade kernel-kvmsmall-develUpgrade kernel-docsUpgrade kernel-rt_debug-vdsoUpgrade kernel-symsUpgrade kernel-debugUpgrade dtb-xilinxUpgrade kernel-azure-extraUpgrade kernel-develUpgrade reiserfs-kmp-defaultUpgrade dtb-amazonUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmallUpgrade kernel-default-develUpgrade dtb-appleUpgrade gfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade dlm-kmp-azureUpgrade kernel-macrosUpgrade kselftests-kmp-defaultUpgrade kernel-64kbUpgrade dtb-mediatekUpgrade dtb-armUpgrade dtb-amdUpgrade kernel-64kb-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-rt-livepatchUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kb-develUpgrade dtb-socionextUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-debug-develUpgrade dtb-hisiliconUpgrade dtb-lgUpgrade kernel-rt-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-azure-livepatch-develUpgrade dtb-amlogic | Aug 9, 2024 | May 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub